Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          iwdS2Kl37iNVjfrQxc+7ES6NsiqaFcqHBWCpd/F3LqI=
Subject key identifier:   6C:E2:A3:1D:A5:6D:B1:AF:79:8D:77:3E:7A:00:CD:02:5B:BC:6C:AF
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       0194BBCE4DAD85F2476D0FCB02B6BF0DFE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:47 +0000
Files and hashes:         1: 1Up92kLaciflZCGF6thZ6O_2gb4.roa (hash: MZjlg+hjkFznVUD2gKvbQop6qeX1ypK906BpNhUjgLA=)
                          2: JDa6SY9OudTO59Luwi4g9XuH-5g.roa (hash: 9WJ0L7baOHSNBgfr0oc7eP1UiTVZAMhpoL/3V6eL10k=)
                          3: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: EZkheU2kBAgKeR808VnK3x81fA2EC+k7pUPuG1ztDtE=)
                          4: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (hash: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=)
                          5: cvzTz2OXBB_yidJBNxcXZxwYdrY.roa (hash: YVNb7JT5aj8Grywf7uIQmWk7NHgm3JKfDMAhwde/BcQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:4d:ad:85:f2:47:6d:0f:cb:02:b6:bf:0d:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Jan 31 10:00:47 2025 GMT
            Not After : Feb  1 10:00:47 2025 GMT
        Subject: CN=6ce2a31da56db1af798d773e7a00cd025bbc6caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:88:8f:ac:2e:39:42:58:a7:1a:fe:ed:88:
                    40:eb:3a:82:50:fb:3e:f1:d2:44:7c:70:74:0b:92:
                    ce:a2:b1:b5:eb:bf:7f:bb:48:25:da:38:96:0b:cb:
                    f7:1d:94:80:64:e9:cc:c5:b3:b2:6a:ff:0b:71:82:
                    4c:cd:ef:5d:fd:2e:66:cd:56:82:2e:6d:b7:78:74:
                    10:24:9c:42:31:f8:54:dd:29:ac:fb:7b:bd:d3:7b:
                    2b:5c:8a:ab:52:e9:56:da:2f:05:dc:a2:8c:7a:38:
                    b9:d2:4a:8e:87:64:19:e4:a3:25:1a:35:92:46:f9:
                    e4:b8:c3:7d:93:d9:a7:76:5f:e2:bd:89:98:f4:e7:
                    f5:3d:f6:71:11:d6:37:1c:fb:3f:5e:be:83:15:a0:
                    be:59:6d:c0:81:2d:27:43:d8:27:e6:e3:65:7e:33:
                    71:e5:88:fb:8a:4d:30:b5:ca:ce:14:53:3d:b2:82:
                    01:15:41:dc:b9:b1:11:c7:d3:da:2d:c5:23:7f:59:
                    2b:6d:97:96:51:8c:fd:e2:c0:7e:ff:73:6f:e6:2e:
                    ce:cc:82:f7:c8:fc:e2:68:8e:ae:b6:0d:71:17:5b:
                    d7:0a:12:5a:67:b8:ee:72:39:a8:3f:b6:a6:74:c7:
                    9a:e7:dc:34:b9:23:83:86:37:f8:1c:dc:5d:7f:89:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:A3:1D:A5:6D:B1:AF:79:8D:77:3E:7A:00:CD:02:5B:BC:6C:AF
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:cb:cb:56:0e:3f:4a:f7:c9:b5:aa:0d:2c:24:a7:b3:2a:
         19:89:4c:06:19:96:f8:a4:37:ba:ae:6c:12:76:31:62:d0:48:
         71:e8:8c:d7:97:88:30:27:d2:c5:e3:43:16:e2:a0:2a:6d:ee:
         79:e5:9e:88:e2:8d:f8:fc:43:11:12:bc:82:34:0d:05:e6:5a:
         5e:e1:8d:0c:93:b3:56:d7:68:8d:88:38:4b:50:c3:68:5a:79:
         3c:62:2e:40:3d:80:7a:1b:fe:31:de:5c:ca:3b:07:67:90:fb:
         93:6d:f7:c8:0b:c5:d1:70:f9:1f:fd:7e:bc:97:d3:65:20:44:
         5f:f5:3f:80:f8:7c:76:17:ee:b5:2a:35:a6:0a:99:01:12:63:
         d3:dd:22:ff:7a:f7:94:fd:e8:26:fb:57:a3:7f:9e:a3:33:fe:
         76:4d:f9:7f:f5:e4:11:3a:a5:63:64:c4:34:49:0c:df:a4:28:
         c8:d7:15:08:e5:3f:97:2d:d2:ec:7f:07:e5:69:d5:6d:f5:59:
         b1:e9:28:1a:d9:35:aa:27:f1:dc:6f:87:a4:a9:dd:f7:31:92:
         f0:8f:fd:6b:76:c5:36:51:7a:6d:22:38:e8:69:a7:12:b7:2b:
         49:be:2e:45:82:2d:06:af:17:60:2d:01:93:7f:4b:cd:32:5b:
         7d:11:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----